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[p^F] iP easy-pass: Edge resource access control 

HWangA.^-^o . --w, KG Shin -I \ 00^ ^ ^ ^ . ^^ 

... and light-weighted IP network- edge resource access control mechanism, called IP Easy-pass, 

to prevent unauthorized access to resen/ed network resources at edge devices. We attach a 

unique pass to each legitimate real-time packet so that an ISP edge router can validate ... 



IP Easy-pass: a light-weight network-edge resource access control - ^iis.y dil 
H Wang, A Bos0: ' ' ; ^. ^ \ V^'^" . ^ ^ ^ '~\"'^ ^ v . 

... a fast and lightweight IP network-edge resource access control mechanism, called IP Easy-pass, 
to prevent unauthorized access to reserved network resources at edge devices. We attach a 
unique pass to each legitimate real-time packet so that an ISP edge router can validate ... 
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based source address spoofing prevention method deployed in IPv6 edge network - ^skky .aCj.kr ?fdf| 
L Xie., J Bi, J vVu - Lecture Notes in Computer Science, 2007 - Springer 

... 2.1 Method Description Our approach of source address spoofing prevention in the IPv6 edge 
network is based on filtering and authentication. ... If the access authentication succeeds, each packet 
sent to somewhere outside the edge network will carry a signature. ... 



iRAN iniius ion biockei based on active networks - spana.com Pdf; 

W La Choker, P Narassmhan, D Sierne, F\ ... -- Proc. of Dance 2002 ■- doijeeecornputersociety.org 
... The blocker is intended as an interim prevention tool, inspecting a small fraction of traffic for ... The 
mobile vulnerability scanner could be improved by having access to more system-oriented facilities. ... 
blocking program can run on the edge router of each attached network so that ... 
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[PDFj End to end IP rate control 

A Mustafa, M Hassan - Recent Advances in Computing and Communications, 2000 - Citeseer 
... fast access to unused network resources, avoidance of traffic congestion and prevention of unfair ... 
Bit Rate (ABR) service which deploys such rate control to provide fast access to any ... Figure 2: 
Shaping-policing interactions between the traffic source and the network edge router. ... 
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Aegis: An active-network-powered defense mechanism against ddos attacks 

" " . " ^ ^ " " ^ " " " 
... Prevention 1 st Response Traceback Stage 1 Stage 2 Stage 3 ... user, who owns a set of IP addresses, 
denoted as "O". Each piece of active code has access rights to ... 1 < m i < n i ) from the Slave 
terminal is denoted by i, which represents the edge router of an amplifying network. ... 



http://scholar.google.com/scholar?q=access+prevention...etwork+%22edge+router%22&hl=en&as_sdt=2001&as_sdtp=on (1 of 2)12/1 1/2009 10:06:23 PM 



access prevention network "edge router" - Google Scholar 



Network border patrol: preventing congestion coiiapse and promoting fairness in ^ 

U . ^ V V ' ^ So. A \'' ' \v^-no'!ons on 2004 vvn \^ 

... added complexity is isolated to edge routers; routers within the core of the network do not 
participate in the prevention of congestion ... 9. Network with a single shared link. ... Both flows compete 
for access to a shared 1 .5-Mb/s bottleneck link ( - ), and only the UDP flow tra- verses a ... 



[PDF] " Denial of service attacks on network-based control systems: impact and mitigation 
M Long, CM Wu, JY Hung - IEEE Transactions on Industrial Informatics, 2005 - eng.auburn.edu 
... Since R5 is the access router sen/ing the end users, now it blocks the traffic originated from 
attacker's machines. ... Due to the intrusion prevention system, after , the mean service time will 
decrease to a lower value (slightly higher than network regular status ) to reflect that the ... 
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A practice of the intru sion prevention system 

... It occupies the network bandwidth or systems resources or both, to cause a system not ... In this 
paper, we design an intrusion prevention system to realize the source-end defense ... You must 
log in to access: • Advanced or Author Search • CrossRef Search • AbstractPlus Records ... 
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[PDF] A Summary of DoS/DDoS Prevention. Monitoring and Mitigation Techniques in a .. 

M Glenn 2003. http:.^www, sans, org/readlng-room/white papers - cnscenter.future.co.kr 
... Edge Router Figure 2 - Example Reflective TCP SYN Flood Attack ... IPSEC tunnels or out of 
band circuits should be considered to protect spoofing attacks between the SS7 gateway 
and the network access servers (NAS). 3.9 Other Attacks ... 4 Prevention ... 
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